jquery - API skips authenticity verification with versionist gem -



jquery - API skips authenticity verification with versionist gem -

i trying implement verify authenticity rails app, seems rails feature

and can't figure out callback failing...

so here applicaiton controller:

class applicationcontroller < actioncontroller::base protect_from_forgery end

here api controller:

class v1::managerleadscontroller < applicationcontroller def create manager_lead = managerlead.create!(manager_lead_params) render json: manager_lead end private def manager_lead_params params.require(:manager_lead).permit(:first_name, :last_name, :email, :phone, :company, :format, :requested_date, :meeting_type, :has_complited_wholesale_investor_form ) end end

and here logs:

started post "/api/v1/manager_leads" 127.0.0.1 @ 2014-10-24 10:29:46 +1100 processing v1::managerleadscontroller#create json parameters: {"manager_lead"=>{"first_name"=>"", "last_name"=>"", "email"=>"", "phone"=>"", "company"=>"", "meeting_type"=>""}} can't verify csrf token authenticity (0.1ms) begin sql (0.3ms) insert "manager_leads" ("company", "created_at", "email", "first_name", "last_name", "meeting_type", "phone", "updated_at") values ($1, $2, $3, $4, $5, $6, $7, $8) returning "id" [["company", ""], ["created_at", "2014-10-23 23:29:46.833290"], ["email", ""], ["first_name", ""], ["last_name", ""], ["meeting_type", ""], ["phone", ""], ["updated_at", "2014-10-23 23:29:46.833290"]] (7.6ms) commit completed 200 ok in 23ms (views: 0.4ms | activerecord: 9.4ms)

can't verity csrf token authenticity, request completed 200ok response :(

if this:

if verified_request? manager_lead = managerlead.create!(manager_lead_params) render json: manager_lead else render json: { error: 'unprocessed entity' }, status: 422 end

then app starts work alright:

started post "/api/v1/manager_leads" 127.0.0.1 @ 2014-10-24 10:30:59 +1100 processing v1::managerleadscontroller#create json parameters: {"manager_lead"=>{"first_name"=>"", "last_name"=>"", "email"=>"", "phone"=>"", "company"=>"", "meeting_type"=>""}} can't verify csrf token authenticity completed 422 unprocessable entity in 3ms (views: 0.1ms | activerecord: 0.0ms)

i'm using

rails 4.1.5 versionist gem jquery-ui-rails # form submission

ok reply was:

protect_from_forgery with: :exception

jquery ruby-on-rails ruby authentication csrf

Comments

Post a Comment

Popular posts from this blog

xslt - DocBook 5 to PDF transform failing with error: "fo:flow" is missing child elements. Required content model: marker* -

xslt - DocBook 5 to PDF transform failing with error: "fo:flow" is missing child elements. Required content model: marker* - i've inherited doc publishing process takes docbook , builds html , pdf output, using apache fop both. project had been started, never completed. lots of tweaking, i've able of doc sets build (20+), except handful, , fail severe code 1 of these 2 conditions: "fo:flow" missing kid elements. required content model: marker* "fo:block" not valid kid of "fo:root" the xml output comes out of docbook , docbook-fop checks out well-formed. the fop error in 1 book, "endecagloss", example, points end of string: <fo:flow flow-name="xsl-region-body" start-indent="4pc" end-indent="0pt"/> here’s log output in case: [java] severe: javax.xml.transform.transformerexception: file:/scratch/publishing/hudson/jobs/build-main-endeca-documentation/workspace/serverdoc/w...
Read more

mediawiki - How do I insert tables inside infoboxes on Wikia pages? -

mediawiki - How do I insert tables inside infoboxes on Wikia pages? - i want insert tables in infoboxes. example, have proteinbox i've developed using infobox template (http://health-and-medicine.wikia.com/wiki/template:proteinbox), , fasta field big fit comfortably in proteinbox. hence collapsible table within box. this tried: {{infobox | row 1 = {| class = "mw-collapsible mw-collapsed wikitable" |- | <!-- table content --> |} }} your problem is, putting nested table within template. pipe characters ( | ) in table syntax collides pipe usage in templates. the commonly used hack around create template called template:! , containing pipe character, , utilize when need set tables, parser functions or other stuff using pipe characters, within templates. table (with every | replaced {{!}} ): {{{!}} {{!}}- {{!}} a1 {{!}} b1 {{!}}- {{!}} a2 {{!}} b2 {{!}}} ...the equivalent of {| |- | a1 | b1 |- | a2 | b2 |} furthermore, hav...
Read more

Local Service User Logged into Windows -

Local Service User Logged into Windows - i created windows service tracks app server user connected through load balancer. it retrieves user logged windows on machine, cross references active directory (ad) business relationship homecoming first name, lastly name , e-mail (for notification through website created project) there 1 scheme on network users remote system, vista system, reason returning values "local service" logged machine, it's weird , security guys impossible "local service" business relationship logged windows. here how user logged windows managementscope ms = new managementscope("\\\\.\\root\\cimv2"); objectquery query = new objectquery("select * win32_computersystem"); managementobjectsearcher searcher = new managementobjectsearcher(ms, query); foreach (managementobject mo in searcher.get()) { _username = mo["username"].tostring(); } // remove domain part username string[] usernameparts = _...
Read more